Enhance Your Career With Available Preparation Guide for 300-715 Exam [Q76-Q96]

5/5 - (1 vote)

Enhance Your Career With Available Preparation Guide for 300-715 Exam

Get Special Discount Offer of 300-715 Certification Exam Sample Questions and Answers

Cisco 300-715 certification is ideal for IT professionals who want to advance their careers in the networking and security field. It validates the candidates’ skills and knowledge in implementing and configuring Cisco ISE solutions, which are essential for securing networks and protecting against cyber threats. With this certification, the candidates can demonstrate their expertise in network security and increase their career opportunities in the IT industry.

To prepare for the Cisco 300-715 exam, you need to have a solid understanding of network security concepts, Cisco ISE architecture, and its components. You also need to have experience in implementing and configuring Cisco ISE solutions in a real-world environment. Cisco offers various training courses, study materials, and practice exams to help you prepare for the exam. You can also join online forums or study groups to interact with other candidates and gain insights into the exam.

QUESTION 76
An engineer is configuring a virtual Cisco ISE deployment and needs each persona to be on a different node. Which persona should be configured with the largest amount of storage in this environment?

policy Services

Primary Administration

Monitoring and Troubleshooting

Platform Exchange Grid

QUESTION 77
Which two values are compared by the binary comparison (unction in authentication that is based on Active Directory?

subject alternative name and the common name

MS-CHAPv2 provided machine credentials and credentials stored in Active Directory

user-presented password hash and a hash stored in Active Directory

user-presented certificate and a certificate stored in Active Directory

Reference:
Basic certificate checking does not require an identity source. If you want binary comparison checking for the certificates, you must select an identity source. If you select Active Directory as an identity source, subject and common name and subject alternative name (all values) can be used to look up a user. https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/ b_ise_admin_guide_sample_chapter_01110.html

QUESTION 78
When configuring Active Directory groups, what does the Cisco ISE use to resolve ambiguous group names?

MIB

TGT

OMAB

SID

QUESTION 79
Which advanced option within a WLAN must be enabled to trigger Central Web Authentication for Wireless users on AireOS controller?

DHCP server

static IP tunneling

override Interface ACL

AAA override

QUESTION 80
What are two components of the posture requirement when configuring Cisco ISE posture? (Choose two)

updates

remediation actions

Client Provisioning portal

conditions

access policy

QUESTION 81
Which of these is not a method to obtain Cisco ISE profiling data?

RADIUS

HTTP

SNMP query

active scans

Netflow

DNS

QUESTION 82
What does the dot1x system-auth-control command do?

causes a network access switch not to track 802.1x sessions

globally enables 802.1x

enables 802.1x on a network access device interface

causes a network access switch to track 802.1x sessions

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/XE3-8-0E/15-24E/configuration/guide/xe-380-configuration/dot1x.html

QUESTION 83
An organization wants to improve their BYOD processes to have Cisco ISE issue certificates to the BYOD endpoints. Currently, they have an active certificate authority and do not want to replace it with Cisco ISE. What must be configured within Cisco ISE to accomplish this goal?

Create a certificate signing request and have the root certificate authority sign it.

Add the root certificate authority to the trust store and enable it for authentication.

Create an SCEP profile to link Cisco ISE with the root certificate authority.

Add an OCSP profile and configure the root certificate authority as secondary.

Reference:
Ref:https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-software/116068-configure-product-00.html

QUESTION 84
Refer to the exhibit:

Which command is typed within the CU of a switch to view the troubleshooting output?

show authentication sessions mac 000e.84af.59af details

show authentication registrations

show authentication interface gigabitethemet2/0/36

show authentication sessions method

QUESTION 85
Which Cisco ISE node does not support automatic failover?

Inline Posture node

Monitoring node

Policy Services node

Admin node

QUESTION 86
What is a function of client provisioning?

Client provisioning ensures that endpoints receive the appropriate posture agents.

Client provisioning checks a dictionary attribute with a value.

Client provisioning ensures an application process is running on the endpoint.

Client provisioning checks the existence, date, and versions of the file on a client.

QUESTION 87
Which term refers to an endpoint agent that tries to join an 802 1X-enabled network?

EAP server

supplicant

client

authenticator

Reference:
https://www.oreilly.com/library/view/cisco-ise-for/9780133103632/ch16.html#:~:text=What%20is%20a%20supplicant%3F,networks%2C%20both%20wired%20and%20wireless.&text=The%20802.1X%20transactions%20are,Identity%20Services%20Engine%20(ISE).

QUESTION 88
What must be configured on the Cisco ISE authentication policy for unknown MAC addresses/identities for successful authentication?

pass

reject

drop

continue

https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_id_stores.html

QUESTION 89
Drag and drop the description from the left onto the protocol on the right that is used to carry out system authentication, authentication, and accounting.

https://www.mbne.net/tech-notes/aaa-tacacs-radius

QUESTION 90
An engineer is configuring 802.1X and wants it to be transparent from the users’ point of view. The implementation should provide open authentication on the switch ports while providing strong levels of security for non-authenticated devices. Which deployment mode should be used to achieve this?

closed

low-impact

open

high-impact

https://www.lookingpoint.com/blog/cisco-ise-wired-802.1x-deployment-monitormode#:~:text=Low%20impact%20mode%20works%20similar,DHCP%2C%20PXE%20boot%2C%20etc.

QUESTION 91
What does the dot1x system-auth-control command do?

causes a network access switch not to track 802.1x sessions

globally enables 802.1x

enables 802.1x on a network access device interface

causes a network access switch to track 802.1x sessions

Reference:
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/XE3-8-0E/15-24E/configuration/guide/xe-380-configuration/dot1x.html

QUESTION 92
How is policy services node redundancy achieved in a deployment?

by enabling VIP

by utilizing RADIUS server list on the NAD

by creating a node group

by deploying both primary and secondary node

Explanation
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/Workflow/b_deployment_2_4.html

QUESTION 93
Which two roles are taken on by the administration person within a Cisco ISE distributed environment?
(Choose two.)

backup

secondary

standby

primary

active

QUESTION 94
A network engineer is configuring guest access and notices that when a guest user registers a second device for access, the first device loses access What must be done to ensure that both devices for a particular user are able to access the guest network simultaneously?

Configure the sponsor group to increase the number of logins.

Use a custom portal to increase the number of logins

Modify the guest type to increase the number of maximum devices

Create an Adaptive Network Control policy to increase the number of devices

https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_admin_guide_27/b_ise_admin_guide_27_chapter_01111.html.xml

QUESTION 95
Which two ports do network devices typically use for CoA? (Choose two )

443

19005

8080

3799

1700

Explanation

QUESTION 96
What gives Cisco ISE an option to scan endpoints for vulnerabilities?

authorization policy

authentication policy

authentication profile

authorization profile